Avalanche tranche vault drained of 1,013,353.61 USDC, zero left

1,013,353.61 USDC moved from vault 0xE25C…7621a to 0x6FF1…b1246 on Oct. 28.

No confirmed pause or fix was posted, no attacker or recovery plan was named.

First reported Oct 28, 2026, 01:17 UTC

Source reports

TRANCHE VAULT ON @avax DRAINED OF 1.01M $USDC, LEAVING NONE FOR WITHDRAWALS @blockaid_ says a flash loan let the attacker mint inflated tranche shares and redeem the USDC. Whether the vault was paused or the flaw fixed was unconfirmed. Read more here… — @DefiantNews (X), Oct 28, 2026, 01:17 UTC
Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained - 𝕏/@blockaid_ 🔗 Discord · Leviathan · Source 🗺️ Blockaid · $AVAX · Vaults 🕵️ @Danicjade via 𝕏 — Rickler Feed, Oct 28, 2026, 02:20 UTC
Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained - 𝕏/@blockaid_ 🔗 Discord · Leviathan · Source 🗺️ Blockaid · $AVAX · Vaults 🕵️ @Danicjade via 𝕏 — Закрепи.sender, Oct 28, 2026, 02:20 UTC
#CertiKAlert 🚨 An Avalanche vault lost ~$1.01M USDC in exploit. https://snowtrace.io/tx/0x3f6b23292a2e9c2956c7ac56d0b1f79b0271b49edec2156d2675ddf1de058c77 A scheduled accounting update reopened used draw capacity, enabling a second withdrawal against the same funding. CertiK… — @CertiKAlert (X), Oct 28, 2026, 03:48 UTC
Avalanche Tranche Vault lost about 1.01M USDC overnight Oct 28. 1,013,353.61 USDC moved to attacker wallet per Arkham. Blockaid flagged flash loan exploit across 2 txs. No team statement or recovery plan. — @PopaRecon (X), Oct 28, 2026, 04:01 UTC

Excerpts are quoted from the linked sources, which own their text.

Follow @PopaRecon on X for new finds, and Web3AlphaFeed on Telegram.